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IN THE CLAIMS 

1. (currently amended) An information recorder for 
recording information onto a recording medium, said recorder 
comprising : 

cryptography means for generating an encryption key 
based on encryption key generating data built within said 
information recorder and for encrypting, using the 
generated encryption key, data that is to be stored on the 
recording medium; and 

memory means for storing a corresponding leaf key and 
at least a portion of a plurality of node keys, the 
plurality of node keys being associated with a plurality of 
nodes whereby a given one of the plurality of node keys is 
associated with a particular one of the plurality of nodes, 
the plurality of nodes being arranged according to a 
hierarchical tree structure having a root node and having 
one or more leaves, a specific leaf that — are — of the one or 
more leaves being associated with said information recorder 
and with the its corresponding leaf key, the portion of the 
plurality of node keys being the node keys associated with 
the nodes disposed along a particular path from the root 
node to the specific leaf, 

the encryption key generating data being renewable 
using a key renewal block and at least one key selected 
from the group consisting of the corresponding leaf key and 
a — selected — e**e — e£ — the portion of the plurality of node 
keys, the key renewal block including encrypted data and 
tag data, the encrypted data being derived from encryption 
of renewed encryption key generating data and the selected 
at least one key, and the tag data indicating locations in 
the hierarchical tree structure whose associated keys are 
encrypted within the encrypted data, 
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the encryption key being a first encryption key and 
the encryption key generating data being first encryption 
key generating data when playback of the recording medium 
is to be restricted to only a player storing a specific 
identifier, the first encryption key generating data being 
stored on the recording medium, and 

the encryption key being a second encryption key and 
the encryption key generating data being second encryption 
key generating data when playback of the recording medium 
is not to be restricted. 

2. (currently amended) The apparatus according to claim 
1, wherein the encryption key generating data is a master key 
common to the — a plurality of information recorders associated 
with a plurality of leaves in the hierarchical tree structure 
such that a given one of the plurality of information recorders 
is associated with a particular one of the plurality of leaves . 

3. (original) The apparatus according to claim 1, 
wherein the encryption key generating data is a medium key 
unique to a specific recording medium. 

4. (currently amended) The apparatus according to claim 
1, wherein: 

at least one of the node keys can be is renew able, e d-r 

and 

there — ts — distributed, — when a— at least one node key is 
renewed, a — the key renewal block (KRB) includes encrypted 
data derived from encryption of the at least one renewed^ 
node key with at least cither — a node key or leaf key 
located on a lower stage of the hierarchical tree structure 
£e — a-e — information — recorder — a-fe — a — leaf — where — the — encryption 
key generating data has to be renewed ; and 

said the cryptography means irB t-he information 

recorder — receives a — renewal data for the encryption key 
generating data encrypted with the at least one renewed 
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node key, encrypts the key renewal block (KRB) to acquire 
the at least one renewed node key, and calculates a— renewal 
data for the encryption key generating data based — eft — using 
the acquired at least one renewed node key thus acquired . 

5. (original) The apparatus according to claim 4, 
wherein : 

the key renewal block (KRB) is stored in a recording 
medium; and 

the cryptography means encrypts the key renewal block 
(KRB) read from the recording medium. 

6. (original) The apparatus according to claim 1, 
wherein : 

the encryption key generating data has a generation 
number as renewal information correlated therewith; and 

the cryptography means stores, as a recording 
generation number into the recording member, a generation 
number of the encryption key generating data having been 
used when storing encrypted data into the recording medium. 

7. (cancelled) 

8. (previously presented) The apparatus according to 
claim 1, wherein: 

when playback of the recording medium is not to be 
restricted, said cryptography means generates a title- 
unique key from a master key, of which the generation is 
managed, stored in the information recorder, a disc ID 
being an identifier unique to a recording medium, a title 
key unique to data to be recorded to the recording medium 
and a device ID being an identifier for the information 
recorder to generate the first encryption key from the 
title-unique key; and 

when playback of the recording medium is to be 
restricted to the player storing the specific identifier, 
said cryptography means generates a title-unique key from 
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the generation-managed master key stored in the information 
recorder, disc ID being an identifier unique to the 
recording medium, title key unique to the data to be 
recorded to the recording medium and the device-unique key 
unique to the information recorder to generate the second 
encryption key from the title-unique key. 

9. (original) The apparatus according to claim 1, 
further comprising a transport stream processing means for 
appending an arrival time stamp (ATS) to each of discrete 
transport packets included in a transport stream; 

the cryptography means generating a block key as an 
encryption key for a block data including more than one packet 
each having the arrival time stamp (ATS) appended thereto; and 

the cryptography means generating a block key as an 
encryption key, in encryption of the data to be stored into the 
recording medium, based on data including the encryption key 
generating data and a block seed being additional information 
unique to the block data including the arrival time stamp (ATS) . 

10. (original) The apparatus according to claim 1, 
wherein the cryptography means encrypts the data to be stored 
into the recording medium according to DES algorithm. 

11. (previously presented) The apparatus according to 
claim 1, further comprising: 

an interface means for receiving information to be 
recorded to a recording medium; 

said interface means identifying copy control 
information appended to each of packets included in a 
transport stream in a data to judge, based on the copy 
control information, whether or not recording to the 
recording medium is possible. 

12. (previously presented) The apparatus according to 
claim 1, further comprising: 
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an interface means for receiving information to be 
recorded to a recording medium; 

said interface means identifying 2-bit EMI (encryption 
mode indicator) as copy control information to judge, based 
on the EMI, whether or not recording to the recording 
medium is possible. 

13. (currently amended) An information player for playing 
back information from a recording medium, said information 
player comprising : 

memory means for storing a corresponding leaf key and 
at least a portion of a plurality of node keys, the 
plurality of node keys being associated with a plurality of 
nodes whereby a given one of the plurality of node keys is 
associated with a particular one of the plurality of nodes, 
the plurality of nodes being arranged according to a 
hierarchical tree structure having a root node and having 
one or more leaves, a specific leaf that — ±-s — of the one or 
more leaves being associated with said information recorder 
and with the its corresponding leaf key, the portion of the 
plurality of node keys being the node keys associated with 
the nodes disposed along a particular path from the root 
node to the specific leaf; 

cryptography means for decrypting encrypted data 
stored in the recording medium using a decryption key and 
for generating the decryption key based on decryption key 
generating data built in said information recorder; and 

the decryption key generating data being renewable 
using a key renewal block and at least one key selected 
from the group consisting of the corresponding leaf key 
and a — selected one of the portion of the plurality of node 
keys , the key renewal block including encrypted data and 
tag data, the encrypted data being derived from encryption 
of renewed encryption key generating data and the selected 
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at least one key, and the tag data indicating locations in 
the hierarchical tree structure whose associated keys are 
encrypted within the encrypted data ; 

the decryption key being a first decryption key and 
the decryption key generating data being first decryption 
key generating data when playback of the recording medium 
is restricted such that said information player can play 
back information from the recording medium only if said 
information player stores a specific identifier, and 

the decryption key being a second decryption key and 
the decryption key generating data being second decryption 
key generating data when playback of the recording medium 
is not restricted. 

14. (currently amended) The apparatus according to claim 
13, wherein the encryption key generating data is a master key 
common to ^e — a plurality of information recorders associated 
with a plurality of leaves in the hierarchical tree structure 
such that a given one of the plurality of information recorders 
is associated with a particular one of the plurality of leaves . 

15. (original) The apparatus according to claim 13, 
wherein the decryption key generating data is a medium key 
unique to a specific recording medium. 

16. (currently amended) The apparatus according to claim 
13, wherein: 

at least one of the node key£ eefi — fee — is renew able, cd; 

and 

there — ±-s — diotributcd, — when a — at least one node key is 
renewed, a — the key renewal block (KRB) includes encrypted 
data derived from encryption of ^he — at least one reneweda4r 
node key with at least cither — a node key or leaf key 
located on a lower stage of the hierarchical tree structure 
to — an — information — recorder — a^fe — a — leaf — where — fc-k-e — encryption 
key generating data has to be r e newed ; and 
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said £-he cryptography means ift fehe information 

recorder — receives a — renewal data for the encryption key 
generating data encrypted with the at least one renewed 
node key, encrypts the key renewal block (KRB) to acquire 
the at least one renewed node key, and calculates e— renewal 
data for the encryption key generating data based — e« — using 
the acquired at least one renewed node key thus acquired . 

17. (original) The apparatus according to claim 16, 
wherein : 

the key renewal block (KRB) is stored in a recording 
medium; and 

the cryptography means encrypts the key renewal block 
(KRB) read from the recording medium. 

18. (original) The apparatus according to claim 13, 
wherein : 

the decryption key generating data has a generation 
number as renewal information correlated therewith; and 

the cryptography means reads, from the recording 
medium when decrypting encrypted data read from the 
recording medium, a generation number of the encryption key 
generating data having been used when encrypting the 
encrypted data and generates a decryption key from the 
decryption key generating data corresponding to the 
generation number thus read. 

19. (cancelled) 

20. (previously presented) The apparatus according to 
claim 13, wherein: 

when playback of the recording medium is not 
restricted, said cryptography means acquires a generation- 
managed master key stored in the information recorder and 
acquires, from a recording medium, a disc ID being an 
identifier unique to a recording medium, a title key unique 
to data to be decrypted and a device ID being an identifier 

8 



Application No.: 09/980,272 



Docket No.: SONYAK 3.3-151 



for the information recorder having recorded the encrypted 
data to generate a title-unique key from the master key, 
disc ID, title key and device key and the first decryption 
key from the title-unique key; and 

when playback of the recording medium is restricted 
and said information player stores the specific identifier, 
said cryptography means acquires a generation-managed 
master key stored in the information recorder and a device- 
unique key unique to, and stored in, the information 
recorder and acquires, from a recording medium, a disc ID 
being an identifier unique to the recording medium and a 
title key unique to the data to be decrypted to generate a 
title-unique key from the master key, disc ID, title key 
and device-unique key, and the second decryption key is 
generated from the title-unique key. 

21. (original) The apparatus according to claim 13, 
further comprising a transport stream processing means for 
controlling data outputting based on an arrival time stamp (ATS) 
appended to each of a plurality of transport packets included in 
the block data having been decrypted by the cryptography means; 

the cryptography means generating a block key as a 
decryption key for a block data including more than one packets 
each having the arrival time stamp (ATS) appended thereto; and 

the block key as a decryption being generated, in 
decryption of the encrypted data stored in the recording medium, 
based on data including the decryption key generating data and a 
block seed being additional information unique to the block data 
including the arrival time stamp (ATS) . 

22. (original) The apparatus according to claim 13, 
wherein the cryptography means decrypts the encrypted data 
stored in the recording medium according to DES algorithm. 
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23. (original) The apparatus according to claim 13, wherein 
there is further provided an interface means for receiving 
information to be recorded to a recording medium; 

the interface means identifying copy control information 
appended to each of packets included in a transport stream in a 
data to judge, based on the copy control information, whether or 
not playback from the recording medium is possible. 

24. (original) The apparatus according to claim 13, 
wherein there is further provided an interface means for 
receiving information to be recorded to a recording medium; 

the interface means identifying 2-bit EMI (encryption mode 
indicator) as copy control information to judge, based on the 
EMI, whether or not playback from the recording medium is 
possible . 

25. (currently amended) An information recording method 
for recording information to a recording medium, said method 
comprising : 

storing a corresponding leaf key and at least a 
portion of a plurality of node keys, the plurality of node 
keys being associated with a plurality of nodes whereby a 
given one of the plurality of node keys is associated with 
a particular one of the plurality of nodes, the plurality 
of nodes being arranged according to a hierarchical tree 
structure having a root node and having one or more leaves, 
a specific leaf that — ±-s — of the one or more leaves being 
associated with said information recorder and with the its 
corresponding leaf key, the portion of the plurality of 
node keys being the node keys associated with the nodes 
disposed along a particular path from the root node to the 
specific leaf; 

renewing encryption key generating data built within 
an information recorder using a key renewal block and at 
least one key selected from the group consisting of the 
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corresponding leaf key and a — selected one — of the portion of 
the plurality of node keys , the key renewal block including 



derived from encryption of 


renewed encryption 


key 


generating data and the selected 


at least one key, and 


the 


tag data indicating locations 


in the hierarchical 


tree 


structure whose associated keys 


are encrypted within 


the 



encrypted data ; 

generating an encryption key based on the encryption 
key generating data; 

encrypting, using the generated encryption key, data 
to be stored on the recording medium; 

the encryption key being a first encryption key and 
the encryption key generating data being first encryption 
key generating data when playback of the recording medium 
is to be restricted to only a player storing a specific 
identifier, the first encryption key generating data being 
stored on the recording medium, and 

the encryption key being a second encryption key and 
the encryption key generating data being second encryption 
key generating data when playback of the recording medium 
is not to be restricted. 

26. (currently amended) The method according to claim 25, 
wherein the encryption key generating data is a master key 
common to the — a plurality of information recorders associated 
with a plurality of leaves in the hierarchical tree structure 
such that a given one of the plurality of information recorders 
is associated with a particular one of the plurality of leaves . 

27. (original) The method according to claim 25, 
wherein the encryption key generating data is a medium key 
unique to a specific recording medium. 

28. (currently amended) The method according to claim 25, 
wherein : 
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at least one of the node keys, eefi — fee — is renew able , cd; 

and 

there — ±-s — distributed, — when a — at least one node key is 
renewed, a — the key renewal block (KRB) includes encrypted 
data derived from encryption of the — at least one renewede4- 
node key with at least cither — a node key or leaf key 
located on a lower stage of the hierarchical tree structure 
te — &b — information — recorder — a-t — a — leaf — where — fc-he — encryption 
key generating data has — to be — renewed ; and 

said the renewing step comprises — steps — ^ includes : 

acquiring the renewed node key by encrypting the key 
renewal block (KRB) ; and 

calculating a — renewal data for the encryption key 
generating data based — en — using the acquired at least one 
renewed node key thus acquired. 

29. (original) The method according to claim 25, 
wherein : 

the encryption key generating data has a generation 
number as renewal information correlated therewith; and 

the cryptography step further includes the step of 
storing, when storing encrypted data into the recording 
medium, a generation number of the encryption key 
generating data having been used, as a recording generation 
number into the recording medium. 

30. (cancelled) 

31. (previously presented) The method according to claim 
25, wherein: 

when playback of the recording medium is not 
restricted, said generating step generates a title-unique 
key from a generation-managed master key stored in the 
information recorder, a disc ID being an identifier unique 
to a recording medium, a title key unique to data to be 
recorded to the recording medium and a device ID being an 
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identifier for the information recorder and generates the 
first encryption key from the title-unique key; and 

when playback of the recording medium is restricted to 
an information player storing the specific identifier, said 
generating step generates a title-unique key from the 
generation-managed master key stored in the information 
recorder, disc ID being an identifier unique to the 
recording medium, title key unique to the data to be 
recorded to the recording medium and the device-unique key 
unique to the information recorder and generates the second 
encryption key from the title-unique key. 

32. (original) The method according to claim 25, 
wherein there is further included a transport stream processing 
step of appending an arrival time stamp (ATS) to each of 
discrete transport packets included in a transport stream; in 
the cryptography step: 

there is generated a block key as an encryption key 
for a block data including more than one packet each having 
the arrival time stamp (ATS) appended thereto; and 

the block key as an encryption key is generated, in 
encryption of the data to be stored into the recording 
medium, based on data including the encryption key 
generating data and a block seed being additional 
information unique to the block data including the arrival 
time stamp (ATS) . 

33. (original) The method according to claim 25, 
wherein there is encrypted in the cryptography step the data to 
be stored into the recording medium according to DES algorithm. 

34. (original) The method according to claim 25, 
wherein copy control information appended to each of packets 
included in a transport stream in a data is identified to judge, 
based on the copy control information, whether or not recording 
to the recording medium is possible. 
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35. (original) The method according to claim 25, 
wherein 2-bit EMI (encryption mode indicator) as copy control 
information is identified to judge, based on the EMI , whether or 
not recording to the recording medium is possible. 

36. (currently amended) An information playback method for 
playing back information from a recording medium, said method 
comprising : 

storing a corresponding leaf key and at least a 
portion of a plurality of node keys, the plurality of node 
keys being associated with a plurality of nodes whereby a 
given one of the plurality of node keys is associated with 
a particular one of the plurality of nodes, the plurality 
of nodes being arranged according to a hierarchical tree 
structure having a root node and having one or more leaves, 
a specific leaf that — is — of the one or more leaves being 
associated with said information recorder and with the its 
corresponding leaf key, the portion of the plurality of 
node keys being the node keys associated with the nodes 
disposed along a particular path from the root node to the 
specific leaf; 

renewing encryption key generating data built within 
an information recorder using a key renewal block and at 
least one key selected from the group consisting of the 
corresponding leaf key and a — selected one — of the portion of 
the plurality of node keys , the key renewal block including 
encrypted data and tag data, the encrypted data being 
derived from encryption of renewed encryption key 
generating data and the selected at least one key, and the 
tag data indicating locations in the hierarchical tree 
structure whose associated keys are encrypted within the 
encrypted data ; 

generating the decryption key based on the renewed 
decryption key generating data; and 
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decrypting the data stored in the recording medium 
using the generated decryption key; 

the decryption key being a first decryption key and 
the decryption key generating data being first decryption 
key generating data when playback of the recording medium 
is restricted such that the information player can play 
back information from the recording medium only if only the 
information player stores a specific identifier, and 

the decryption key being a second decryption key and 
the decryption key generating data being second decryption 
key generating data when playback of the recording medium 
is not to be restricted. 

37. (currently amended) The method according to claim 36, 
wherein the encryption key generating data is a master key 
common to the — a plurality of information recorders associated 
with a plurality of leaves in the hierarchical tree structure 
such that a given one of the plurality of information recorders 
is associated with a particular one of the plurality of leaves . 

38. (original) The method according to claim 36, 
wherein the decryption key generating data is a medium key 
unique to a specific recording medium. 

39. (currently amended) The method according to claim 36, 
wherein: 

at least one of the node keys; can be is renew able, err- 
and 

there — ts — diotributcd, — when a— at least one node key is 
renewed, a— the key renewal block (KRB) includes encrypted 
data derived from encryption of the — at least one reneweddjr 
node key with at least cither — a node key or leaf key 
located on a lower stage of the hierarchical tree structure 
te — a-ft — information — recorder — at — a — leaf — where — the — encryption 
key generating data hag to be renewed ; and 

said the cryptography step comprises steps of includes : 



Application No.: 09/980,272 Docket No.: SON YAK 3.3-151 



encrypting the key renewal block (KRB) to acquire the 
renewed node key; and 

calculating a — renewal data for the encryption key 
generating data based — en — using the acquired at least one 
renewed node key thus acquired. 

40. (original) The method according to claim 36, 
wherein : 

the decryption key generating data has a generation 
number as renewal information correlated therewith; and 

in the cryptography step, there is read from the 
recording medium when decrypting encrypted data from the 
recording medium, a generation number of the encryption key 
generating data having been used when encrypting the 
encrypted data to generate a decryption key from decryption 
key generating data corresponding to the generation number 
thus read. 

41. (cancelled) 

42. (previously presented) The method according to claim 
36, wherein said generating step includes: 

when playback of the recording medium is not to be 
restricted, acquiring a generation-managed master key 
stored in the information player, acquiring, from the 
recording medium, a disc ID being an identifier unique to a 
recording medium, a title key unique to data to be 
decrypted and a device ID being an identifier for the 
information recorder having recorded the encrypted data to 
generate a title-unique key from the master key, disc ID, 
title key and device key and the first decryption key from 
the title-unique key; and 

when playback of the recording medium is restricted 
and the information player stores the specific identifier, 
acquiring a generation-managed master key stored in the 
information player and a device-unique key unique to, and 
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stored in, the information player, and acquiring, from a 
recording medium, a disc ID being an identifier unique to 
the recording medium and a title key unique to the data to 
be decrypted to generate a title-unique key from the master 
key, disc ID, title key and device-unique key; the second 
decryption key being generated from the title-unique key 
thus generated. 

43. (previously presented) The method according to claim 
36, wherein: 

the player includes a transport stream processing 
means for controlling data outputting based on an arrival 
time stamp (ATS) appended to each of a plurality of 
transport packets included in the decrypted block; and in 
the cryptography step: 

a block key is generated as a decryption key for a 
block data including more than one packets each having the 
arrival time stamp (ATS) appended thereto; and 

the block key as a decryption is generated, in 
decryption of the encrypted data stored in the recording 
medium, based on data including the decryption key 
generating data and a block seed being additional 
information unique to the block data including the arrival 
time stamp (ATS) . 

44. (original) The method according to claim 36, 
wherein the encrypted data stored in the recording medium is 
decrypted according to DES algorithm. 

45. (original) The method according to claim 36, 
wherein copy control information appended to each of packets 
included in a transport stream in a data is identified to judge, 
based on the copy control information, whether or not playback 
from the recording medium is possible. 

46. (original) The method according to claim 36, 
wherein 2-bit EMI (encryption mode indicator) as copy control 
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information is identified to judge, based on the EMI, whether or 
not playback from the recording medium is possible. 
47.-56. (cancelled) 

57. (currently amended) A storage medium for storing a 
computer program for carrying out a method of recording 
information to a recording medium, said method comprising: 

storing a corresponding leaf key and at least a 
portion of a plurality of node keys, the plurality of node 
keys being associated with a plurality of nodes whereby a 
given one of the plurality of node keys is associated with 
a particular one of the plurality of nodes, the plurality 
of nodes being arranged according to a hierarchical tree 
structure having a root node and having one or more leaves, 
a specific leaf that — ±-s — of the one or more leaves being 
associated with said information recorder and with ^b&e — its 
corresponding leaf key, the portion of the plurality of 
node keys being the node keys associated with the nodes 
disposed along a particular path from the root node to the 
specific leaf; 

renewing encryption key generating data built within 
an information recorder using a key renewal block and at 
least one key selected from the group consisting of the 
corresponding leaf key and a — selected — e**e — of the portion of 
the plurality of node keys , the key renewal block including 
encrypted data and tag data, the encrypted data being 
derived from encryption of renewed encryption key 
generating data and the selected at least one key, and the 
tag data indicating locations in the hierarchical tree 
structure whose associated keys are encrypted within the 
encrypted data ; 

generating an encryption key based on the encryption 
key generating data ; 
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encrypting, using the generated encryption key, data 
to be stored on the recording medium; 

the encryption key being a first encryption key and 
the encryption key generating data being first encryption 
key generating data when playback of the recording medium 
is to be restricted to only a player storing a specific 
identifier, the first encryption key generating data being 
stored on the recording medium, and 

the encryption key being a second encryption key and 
the encryption key generating data being second encryption 
key generating data when playback of the recording medium 
is not to be restricted. 

58. (currently amended) A storage medium for storing a 
computer program for carrying out a method of playing back 
information stored in a recording medium, said method 
comprising : 

storing a corresponding leaf key and at least a 
portion of a plurality of node keys, the plurality of node 
keys being associated with a plurality of nodes whereby a 
given one of the plurality of node keys is associated with 
a particular one of the plurality of nodes, the plurality 
of nodes being arranged according to a hierarchical tree 
structure having a root node and having one or more leaves, 
a specific leaf that — — of the one or more leaves being 
associated with said information recorder and with ^ke — its 
corresponding leaf key, the portion of the plurality of 
node keys being the node keys associated with the nodes 
disposed along a particular path from the root node to the 
specific leaf; 

renewing encryption key generating data built within 
an information recorder using a key renewal block and at 
least one key selected from the group consisting of the 
corresponding leaf key and a — select e d o ne — of the portion of 
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the plurality of node keys , the key renewal block including 



derived from encryption of 


renewed encryption 


key 


generating data and the selected 


at least one key, and 


the 


tag data indicating locations 


in the hierarchical 


tree 


structure whose associated keys 


are encrypted within 


the 



encrypted data ; 

generating the decryption key based on the renewed 
decryption key generating data; and 

decrypting the data stored in the recording medium 
using the generated decryption key; 

the decryption key being a first decryption key and 
the decryption key generating data being first decryption 
key generating data when playback of the recording medium 
is restricted such that the information player can play 
back information from the recording medium only if only an 
information player stores a specific identifier, and 
the decryption key being a second decryption key and the 
decryption key generating data being second decryption key 
generating data when playback of the recording medium is 
not to be restricted. 
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